https://www.stefanroth.net/2025/04/06/azure-policy-resolve-managed-identity-iam-guid/